Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137302e302f32332d3233203d3e203532353435.roa
File:                     3136382e3132312e3137302e302f32332d3233203d3e203532353435.roa (raw, json)
Hash identifier:          lPL95+SUeExQaAChuTyBP4oj0edBPds6y+iCHz6H4Bg=
Subject key identifier:   D9:10:D8:60:45:03:D4:3A:B0:A7:D3:94:A3:39:FE:EC:BD:BD:9B:7C
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       4F73092C505559BB5A18607C41B93FE3100E9C59
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137302e302f32332d3233203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:13 +0000
ROA not before:           Thu 19 Jan 2023 23:01:13 +0000
ROA not after:            Thu 18 Jan 2024 23:06:13 +0000
asID:                     52545
IP address blocks:        168.121.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:09:2c:50:55:59:bb:5a:18:60:7c:41:b9:3f:e3:10:0e:9c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:13 2023 GMT
            Not After : Jan 18 23:06:13 2024 GMT
        Subject: CN=D910D8604503D43AB0A7D394A339FEECBDBD9B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f0:07:3a:5d:ee:f7:2e:9f:fd:00:fa:a2:4d:
                    f2:e4:1b:2b:e6:ee:35:23:17:73:14:26:f8:84:f3:
                    7b:88:11:68:8b:79:ea:99:25:f8:12:48:22:be:77:
                    1c:50:e4:97:dd:11:b5:37:9b:8a:f4:57:d2:7f:9a:
                    99:73:e9:35:a7:1d:1e:44:72:76:a2:b6:a7:66:9f:
                    ad:f1:99:49:9d:66:d9:36:5a:91:e3:04:94:e1:4e:
                    78:4c:0d:df:59:c7:3e:3c:fd:0d:da:c6:88:c1:98:
                    93:1d:1d:36:ba:a6:5b:ca:3c:81:3e:ee:43:bb:05:
                    1d:f1:e9:4b:ba:22:bc:a4:10:06:c2:fe:79:4e:41:
                    af:38:84:04:73:0f:16:96:6d:d1:f0:9c:82:b1:a3:
                    f6:e7:c5:d0:c5:90:b1:91:d0:55:19:f0:f8:74:13:
                    a1:14:b6:14:25:3b:22:f3:89:2a:57:f0:4a:4f:5e:
                    1b:a7:87:32:4b:97:e5:a5:d8:cb:cd:ce:c5:29:ae:
                    5e:9e:fd:24:cc:e2:e1:83:31:b5:ad:03:87:a5:5f:
                    f1:5f:be:3d:a3:b0:27:c6:3e:88:94:38:64:7a:7b:
                    f7:03:8a:60:7e:2b:8e:75:ca:95:a1:7c:da:ae:54:
                    70:bb:8c:14:4e:f7:f1:da:dd:8e:97:54:9d:79:1b:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:D8:60:45:03:D4:3A:B0:A7:D3:94:A3:39:FE:EC:BD:BD:9B:7C
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137302e302f32332d3233203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:46:b8:48:78:f9:0e:f3:31:b3:4e:94:8d:8e:24:1e:4b:
         30:5b:6c:d8:a1:b2:c1:96:71:d1:9e:eb:61:f2:29:4a:b4:c9:
         68:28:4e:91:3c:ea:79:9b:59:04:22:d1:28:47:3e:5b:1e:66:
         70:7b:a1:93:c2:4d:4a:9f:cd:bd:ee:6e:cc:5d:97:6e:ca:b5:
         29:5a:18:4a:83:ef:b3:25:3a:46:de:93:ba:3c:e0:54:f0:62:
         0b:d3:09:84:11:23:78:7a:16:2e:9a:12:c2:02:d0:18:2d:36:
         b6:e6:d7:f9:73:e4:0b:1b:dc:37:33:ce:9d:39:b8:1a:af:50:
         25:7a:6b:79:12:ac:c0:a2:20:66:fa:72:89:cc:c3:65:68:ed:
         5c:a5:f8:e3:d9:84:b0:9a:f3:0e:37:fc:b2:ba:12:b4:06:6e:
         8e:32:4b:e8:0d:11:f2:43:c3:ac:bd:c3:28:d0:87:83:64:fb:
         e6:9f:5a:c0:21:87:ec:af:bd:19:0e:0f:14:08:52:99:e7:16:
         9a:a7:c0:b6:89:be:ac:79:6b:76:76:7d:1a:f4:b0:c2:b5:49:
         3e:03:44:db:dd:e8:b0:57:59:49:1d:24:06:84:9f:5e:e5:6b:
         7d:e6:26:39:b8:00:21:e0:fb:67:ae:f4:a4:8f:93:ef:c4:d5:
         28:5f:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org